$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer File: A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer (raw, json) Hash identifier: 5YtNPI+um0SwmmvjJT+6Wthqujw9Tb2hj90kjSTgq1E= Subject key identifier: A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7020D608B1A6D12AA7B09642247A516790893233 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:59:04 +0000 Certificate not after: Tue 04 Mar 2025 18:04:04 +0000 Subordinate resources: AS: 273074 IP: 45.239.107.0/24 IP: 200.33.28.0/24 IP: 2803:2f90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 03:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:20:d6:08:b1:a6:d1:2a:a7:b0:96:42:24:7a:51:67:90:89:32:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:59:04 2024 GMT Not After : Mar 4 18:04:04 2025 GMT Subject: CN=A4EAE61F1B8952AFAD5693A1FC168A752D346DF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:f7:c0:25:d5:34:41:f2:bc:18:a3:9c:f3: 97:3c:8e:90:20:62:25:a6:ed:70:cc:ec:46:38:a0: 68:25:bc:e0:ef:bf:aa:8a:c2:12:94:8a:00:00:73: b1:d7:84:d3:f3:4a:8c:bc:db:d9:22:e3:c1:4c:f0: b8:bb:6d:98:f6:11:59:50:f6:0d:76:1b:41:52:8a: d5:d8:33:ba:04:4c:64:82:63:7b:e3:89:1a:0e:de: 14:cd:e7:5d:01:e1:6d:f2:a4:ca:5c:d9:95:87:d5: 73:af:09:e5:36:a4:5b:e7:8d:88:9f:32:98:73:e3: 15:18:76:1f:86:11:5b:08:9a:16:b3:5e:c0:f3:bc: dc:fa:1a:1a:48:07:39:4c:28:7f:31:5d:8c:66:e4: 8b:81:9e:6a:c9:f1:4c:34:f7:c1:88:ff:65:ca:ef: 9c:32:77:71:db:e6:7f:d8:89:c2:0c:5d:fc:56:eb: 27:0d:3d:7d:83:cd:9f:ef:52:ed:43:fa:34:27:de: d4:00:e7:5e:1c:53:13:6e:f8:ed:7a:0a:30:83:9d: 5b:21:8e:97:1b:6e:3b:5d:1e:01:f5:f6:7a:4f:71: 7e:81:a4:52:88:de:56:f4:83:ba:f4:28:a8:7b:1c: 0a:c6:40:c9:e8:74:60:15:d7:35:48:88:9c:8b:25: 3a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.239.107.0/24 200.33.28.0/24 IPv6: 2803:2f90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273074 Signature Algorithm: sha256WithRSAEncryption 18:7e:d9:d9:a4:7e:d3:3f:cd:b9:a5:30:c6:48:aa:db:84:60: 3a:88:30:b7:66:db:bf:ca:c9:b6:32:93:ef:8f:f0:64:15:d0: 70:c4:6e:02:da:e7:80:fc:40:55:ce:ce:d9:c7:50:5b:68:23: 4d:1e:fe:e7:42:9b:81:0f:09:12:d5:d0:42:be:82:b2:a1:1e: 40:ea:2b:3a:25:6a:df:70:59:a7:37:c8:f4:96:b9:a4:68:62: 29:88:e9:d5:cc:2d:be:1e:dd:48:e4:2e:35:3b:55:51:2d:bf: d2:b5:75:1a:20:0c:e7:e0:a7:75:66:7c:79:9f:0e:3c:2b:3c: 90:75:4c:7c:f3:68:9e:7d:92:06:d3:ec:7a:c3:00:73:0f:8d: 9b:b0:49:43:5e:1c:fd:3a:79:cd:03:1b:c0:1b:0f:95:9e:42: 7a:8d:bc:49:29:d7:e7:2f:ee:29:e8:dd:00:e1:ec:1f:b0:a0: 3f:32:4b:34:4b:27:2a:eb:14:9f:14:47:1a:e7:82:d9:e1:05: 4d:07:0a:0a:97:b5:82:77:13:bc:91:99:02:72:77:c8:98:96: 3a:51:8d:8f:58:be:43:ac:9d:68:05:d8:ba:a4:4b:ae:2d:93: ca:5d:81:eb:06:fb:72:bf:d9:57:b6:43:13:6e:7a:56:59:7f: d0:f3:64:b3 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUcCDWCLGm0SqnsJZCJHpRZ5CJMjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzU5MDRaFw0yNTAzMDQxODA0MDRaMDMxMTAvBgNV BAMTKEE0RUFFNjFGMUI4OTUyQUZBRDU2OTNBMUZDMTY4QTc1MkQzNDZERjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7PfAJdU0QfK8GKOc85c8jpAg YiWm7XDM7EY4oGglvODvv6qKwhKUigAAc7HXhNPzSoy829ki48FM8Li7bZj2EVlQ 9g12G0FSitXYM7oETGSCY3vjiRoO3hTN510B4W3ypMpc2ZWH1XOvCeU2pFvnjYif Mphz4xUYdh+GEVsImhazXsDzvNz6GhpIBzlMKH8xXYxm5IuBnmrJ8Uw098GI/2XK 75wyd3Hb5n/YicIMXfxW6ycNPX2DzZ/vUu1D+jQn3tQA514cUxNu+O16CjCDnVsh jpcbbjtdHgH19npPcX6BpFKI3lb0g7r0KKh7HArGQMnodGAV1zVIiJyLJTrPAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSk6uYfG4lSr61W k6H8Fop1LTRt8TAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkFENTUxRUExN0E1NzU3QUI2OEVGQjJB NjVCNUM4NkM0ODU3MkRCOEQxQzI2OEI4NTBCMDZBOUJDQkRBM0UxRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GQUQ1NTFFQTE3QTU3NTdBQjY4RUZCMkE2NUI1Qzg2QzQ4NTcyREI4RDFD MjY4Qjg1MEIwNkE5QkNCREEzRTFGLzAvQTRFQUU2MUYxQjg5NTJBRkFENTY5M0Ex RkMxNjhBNzUyRDM0NkRGMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALe9rAwQAyCEc MA0EAgACMAcDBQAoAy+QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqsjANBgkq hkiG9w0BAQsFAAOCAQEAGH7Z2aR+0z/NuaUwxkiq24RgOogwt2bbv8rJtjKT74/w ZBXQcMRuAtrngPxAVc7O2cdQW2gjTR7+50KbgQ8JEtXQQr6CsqEeQOorOiVq33BZ pzfI9Ja5pGhiKYjp1cwtvh7dSOQuNTtVUS2/0rV1GiAM5+CndWZ8eZ8OPCs8kHVM fPNonn2SBtPsesMAcw+Nm7BJQ14c/Tp5zQMbwBsPlZ5Ceo28SSnX5y/uKejdAOHs H7CgPzJLNEsnKusUnxRHGueC2eEFTQcKCpe1gncTvJGZAnJ3yJiWOlGNj1i+Q6yd aAXYuqRLri2Tyl2B6wb7cr/ZV7ZDE256Vll/0PNksw== -----END CERTIFICATE-----Generated at Thu Jun 27 21:46:07 2024 by rpki-client on console-fra.rpki-client.org